$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8c0b0b9f-e79d-33f6-967c-d2d14c2cd85a.roa File: 8c0b0b9f-e79d-33f6-967c-d2d14c2cd85a.roa (raw, json) Hash identifier: SvLjuG6sNKOp+xzZaSZmpSyWO4+R7fUDGyrHH3GuN+w= Subject key identifier: 01:D3:73:D1:7E:9F:F3:FF:73:B9:60:54:F5:80:96:DC:6A:6D:75:A7 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499829CABA2E798EAC281CF200 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8c0b0b9f-e79d-33f6-967c-d2d14c2cd85a.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 209.115.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:ca:ba:2e:79:8e:ac:28:1c:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=179a97fd-94ac-46b4-ae25-afe6a5e929a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:50:c1:8a:26:5b:4c:0e:73:0f:29:da:b5:c1: 2d:0b:e3:d7:1c:a9:c9:e2:30:90:97:b4:f7:69:cd: d4:ee:cc:1e:e4:fa:72:0f:9b:94:f3:b9:eb:3b:1f: 1d:da:5a:2f:cc:ef:8a:4d:c8:7f:3f:7f:a3:8a:cb: a6:e3:b2:93:99:ab:8b:1c:d3:ce:57:a3:a2:85:63: ed:8e:e1:ee:15:18:47:95:36:96:60:3f:f3:66:1f: ee:a2:87:4a:35:80:77:b1:1a:7f:ce:3d:d5:9c:be: 2e:62:63:b0:f3:4b:5e:c7:40:8e:35:1e:01:43:ae: 8a:69:70:c9:5b:03:2d:33:6d:80:1a:5f:85:27:85: 4d:ae:4d:15:ac:3c:75:c5:c4:66:40:a9:ae:ad:23: 41:9d:ee:1e:7e:cf:26:17:25:b5:a6:87:ad:d1:d4: b6:3c:00:cf:06:ee:fe:af:be:24:5f:16:13:f5:68: 41:51:13:66:64:e3:82:67:23:5e:8d:9d:3b:2e:26: de:a4:29:bc:df:19:8b:30:e0:4c:3e:e0:77:14:c5: fd:b9:90:32:f3:48:64:11:23:b6:89:2b:4b:59:1c: bb:4f:88:e5:49:cf:9b:6c:66:ab:63:fe:2a:37:72: 28:8f:b1:c9:78:36:66:40:3f:fb:00:46:41:c4:26: 56:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D3:73:D1:7E:9F:F3:FF:73:B9:60:54:F5:80:96:DC:6A:6D:75:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8c0b0b9f-e79d-33f6-967c-d2d14c2cd85a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.115.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:d1:2b:b2:0c:44:b4:22:51:fd:92:e7:b6:04:9f:3a:22:1b: ea:c9:ed:e1:18:59:05:2b:39:b7:c3:d5:0f:52:38:bf:fe:39: 34:56:c4:b7:07:65:1e:25:5a:29:82:fd:88:eb:86:63:8c:42: 54:c0:8c:5b:75:22:8f:84:01:1b:9c:56:94:7b:cd:70:30:c3: 87:0b:4e:33:72:f2:fd:a3:c5:6a:11:d1:e4:0c:6b:39:c4:dc: 14:16:5f:0b:e3:bb:56:f2:80:6a:79:e1:bb:c0:4d:bf:f3:36: 12:9c:a5:24:d9:d8:83:a1:c4:07:23:92:6a:0a:ae:95:60:03: eb:5f:b9:fa:9e:02:62:88:08:26:9b:d0:53:77:74:8e:d7:51: 10:67:ec:e0:6f:54:a9:51:44:2d:0c:65:d5:a2:c5:a0:55:d3: 3e:8d:39:df:82:3d:65:ee:7f:47:50:b0:0c:4e:86:50:ce:ef: 7c:cf:a2:1a:a3:ef:72:92:45:cd:b9:ea:c1:ac:54:a9:2c:f9: 73:b0:3f:f7:ca:45:5f:04:5b:ce:e4:f2:13:6e:fd:be:da:92: a1:a7:e4:6c:ab:c4:5a:1d:ce:17:e6:7f:ba:fd:47:7a:3e:95: 82:40:2d:1c:8b:ea:ea:52:a0:63:45:dc:dc:58:42:b4:59:9d: c6:2e:63:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcq6LnmOrCgc8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MTc5YTk3ZmQtOTRhYy00NmI0LWFlMjUtYWZlNmE1ZTkyOWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1DBiiZbTA5zDynatcEtC+PXHKnJ4jCQl7T3 ac3U7swe5PpyD5uU87nrOx8d2lovzO+KTch/P3+jisum47KTmauLHNPOV6OihWPt juHuFRhHlTaWYD/zZh/uoodKNYB3sRp/zj3VnL4uYmOw80tex0CONR4BQ66KaXDJ WwMtM22AGl+FJ4VNrk0VrDx1xcRmQKmurSNBne4efs8mFyW1poet0dS2PADPBu7+ r74kXxYT9WhBURNmZOOCZyNejZ07LibepCm83xmLMOBMPuB3FMX9uZAy80hkESO2 iStLWRy7T4jlSc+bbGarY/4qN3Ioj7HJeDZmQD/7AEZBxCZW/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHTc9F+n/P/c7lgVPWAltxqbXWnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGMwYjBiOWYtZTc5ZC0z M2Y2LTk2N2MtZDJkMTRjMmNkODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0XPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANHRK7IMRLQiUf2S57YEnzoiG+rJ7eEYWQUrObfD1Q9SOL/+OTRWxLcH ZR4lWimC/YjrhmOMQlTAjFt1Io+EARucVpR7zXAww4cLTjNy8v2jxWoR0eQMaznE 3BQWXwvju1bygGp54bvATb/zNhKcpSTZ2IOhxAcjkmoKrpVgA+tfufqeAmKICCab 0FN3dI7XURBn7OBvVKlRRC0MZdWixaBV0z6NOd+CPWXuf0dQsAxOhlDO73zPohqj 73KSRc256sGsVKks+XOwP/fKRV8EW87k8hNu/b7akqGn5GyrxFodzhfmf7r9R3o+ lYJALRyL6upSoGNF3NxYQrRZncYuY3o= -----END CERTIFICATE-----Generated at Thu May 8 09:24:02 2025 by rpki-client